add dependabot updates for GitHub Actions, Go modules and Dockerfile

.github/dependabot.yml

@@ -0,0 +1,22 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      "GitHub Actions updates":
+        patterns:
+          - "*"
+  - package-ecosystem: "gomod"
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      "Go modules updates":
+        dependency-type: "production"

Dockerfile

@@ -4,8 +4,6 @@ ARG GIT_BRANCH
 ARG GITHUB_SHA
 ARG CI
 
-ENV GOFLAGS="-mod=vendor"
-
 ADD . /build/cronn
 WORKDIR /build/cronn
 
@@ -19,6 +17,9 @@ RUN \
 
 FROM umputun/baseimage:app-latest
 
+# enables automatic changelog generation by tools like Dependabot
+LABEL org.opencontainers.image.source="https://github.com/umputun/cronn"
+
 COPY --from=build /build/cronn/cronn /srv/cronn
 RUN chmod +x /srv/cronn
 

Dockerfile.artifacts

@@ -1,4 +1,4 @@
-FROM goreleaser/goreleaser:v1.21.2 as build
+FROM goreleaser/goreleaser:v1.25.1 as build
 
 WORKDIR /build
 ADD . /build

Dockerfile.site

@@ -11,6 +11,8 @@ RUN mkdocs build
 
 
 FROM ghcr.io/umputun/reproxy
+# enables automatic changelog generation by tools like Dependabot
+LABEL org.opencontainers.image.source="https://github.com/umputun/cronn"
 COPY --from=build /build/site /srv/site
 EXPOSE 8080
 USER app

Makefile

@@ -10,7 +10,7 @@ dist:
 	docker rm -f cronn.bin
 
 race_test:
-	cd app && go test -race -mod=vendor -timeout=60s -count 1 ./...
+	cd app && go test -race -timeout=60s -count 1 ./...
 
 prep_site:
 	cp -fv README.md site/docs/index.md